CVE-2016-9099

Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.
Configurations

Configuration 1 (hide)

cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:broadcom:advanced_secure_gateway:6.6:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:broadcom:symantec_proxysg:6.6:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:00

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/102455 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/102455 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1040138 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040138 - Third Party Advisory, VDB Entry
References () https://www.symantec.com/security-center/network-protection-security-advisories/SA155 - Vendor Advisory () https://www.symantec.com/security-center/network-protection-security-advisories/SA155 - Vendor Advisory

Information

Published : 2017-05-11 14:30

Updated : 2024-11-21 03:00


NVD link : CVE-2016-9099

Mitre link : CVE-2016-9099

CVE.ORG link : CVE-2016-9099


JSON object : View

Products Affected

broadcom

  • symantec_proxysg
  • advanced_secure_gateway
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')